Lucene search
GoogleOSV:CVE-2022-48319HistoryFeb 20, 2023 - 5:15 p.m.
CVE-2022-48319
2023-02-2017:15:12
Google
osv.dev
2
checkmk
host secret
disclosure
unprotected file
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS
0
Percentile
13.3%
Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29’s Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to gain access to the host secret through the unprotected agent updater log file.
References
Related
nvd
nvd
CVE-2022-48319
2023-02-20 17:15:12
prion
prion
Code injection
2023-02-20 17:15:00
openvas
openvas
cve
cve
CVE-2022-48319
2023-02-20 17:15:12
ubuntucve
ubuntucve
CVE-2022-48319
2023-02-20 00:00:00
cvelist
cvelist
CVE-2022-48319 Host secret disclosed in Checkmk logs
2023-02-20 16:56:18
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS
0
Percentile
13.3%
Related for OSV:CVE-2022-48319